Mousejack attack vulnerability

NAC4EV

Golden Member
Feb 26, 2015
1,882
754
136
Your laptop can be 'MouseJacked' from up to 100 metres away. You could be in the office and a visitor hacks you from reception, you could be at home and a hacker attacks you from the street, you could be in a coffee shop and another customer hacks you. The same threat exists at an airport, or on a plane, or in many other situations.

https://www.mousejack.com/

[FONT=&quot]MouseJack is a class of vulnerabilities that affects the vast majority of wireless, non-Bluetooth keyboards and mice. These peripherals are 'connected' to a host computer using a radio transceiver, commonly a small USB dongle. Since the connection is wireless, and mouse movements and keystrokes are sent over the air, it is possible to compromise a victim's computer by transmitting specially-crafted radio signals using a device which costs as little as $15.

An attacker can launch the attack from up to 100 meters away. The attacker is able to take control of the target computer, without physically being in front of it, and type arbitrary text or send scripted commands. It is therefore possible to perform rapidly malicious activities without being detected.

The MouseJack exploit centers around injecting encrypted keystrokes into a target computer. Mouse movements are usually sent un-encrypted, and keystrokes are often encrypted (to prevent eavesdropping what is being typed). However the MouseJack vulnerability takes advantage of affected receiver dongles, and their associated software, allowing un-encrypted keystrokes transmitted by an attacker to be passed on to the computer's operating system as if the victim had legitimately typed them.

A LIST OF AFFECTED DEVISES CAN BE FOUND HERE


.[/FONT]
 

John Connor

Lifer
Nov 30, 2012
22,757
618
121
This is old hat. And I'm always present at my computer so if I see a mouse or keystrokes move around I'll know it.
 

Cerb

Elite Member
Aug 26, 2000
17,484
33
86
This is old hat. And I'm always present at my computer so if I see a mouse or keystrokes move around I'll know it.
It's much more a concern, though only to users on the go (hotel-hopping business travelers, FI), that someone might track your keystrokes from a distance. If they can do one, they can do the other.

Realistically, just exaggerate it and make it a good push for everybody to start using BT 4 for their wireless devices, instead of unique dongles.
 

TeknoBug

Platinum Member
Oct 2, 2013
2,084
31
91
Good thing I use bluetooth mouse & keyboard. TBH I've never been a fan of wireless devices, when I do my banking or other sensitive activities I always do it on a wired connection rather than via wifi.
 

BarkingGhostar

Diamond Member
Nov 20, 2009
8,410
1,617
136
Considering how easy it [probably] is to hack through the wireless front door how is this more of a threat?
 

John Connor

Lifer
Nov 30, 2012
22,757
618
121
It's much more a concern, though only to users on the go (hotel-hopping business travelers, FI), that someone might track your keystrokes from a distance. If they can do one, they can do the other.

Realistically, just exaggerate it and make it a good push for everybody to start using BT 4 for their wireless devices, instead of unique dongles.


Personally, if I'm at a hotel I'd be more concerned about a fake hot spot or DNS hijacking.